Last year, Microsoft released Surface Enterprise Management Mode (SEMM) to centrally control and manage Surface UEFI settings on Surface Pro 4 and Surface Book devices. Today, they announced support for System Center Configuration Manager for deploying and managing SEMM. With these solutions, you now have streamlined Surface deployment path.

The first step is to place the required SEMM assemblies on the Surface device by deploying the Microsoft Surface UEFI Manager.

Once the assemblies are present, you can deploy, manage, or remove SEMM all through PowerShell.

You can find a walkthrough of an SEMM deployment PowerShell script and application deployment with Configuration Manager here at TechNet Library. You can download the Microsoft Surface UEFI Configurator and Microsoft Surface UEFI Manager from the Surface Tools for IT page in the Download Center.